Backdoor in TRENDnet IP cameras

[ronjor]

Consolecowboys blogger someLuser has identified a security vulnerability in some TRENDnet IP cameras which permits inquisitive web users to access them without authentication. He discovered the vulnerability whilst exploring the firmware on his TV-IP110w camera using a tool called binwalk.

http://www.h-online.com/security/new...s-1428896.html

[Dermot7]

Feeds from thousands of Trendnet home security cameras have been breached, allowing any web user to access live footage without needing a password.

http://www.bbc.co.uk/news/technology-16919664

A flaw in home security cameras made by Trendnet potentially exposed thousands of customers to hackers who could access the live video feeds without a password.

The vulnerability was discovered by a blogger who uses the name “someLuser” and who posted details of the flaw in January, describing how he was able to find vulnerable cameras online by using the Shodan search engine, which allows users to find internet-connected devices using simple search terms.

http://www.wired.com/threatlevel/201...meras-exposed/

[funkydude]

I'm not sure what worries me more. The fact that this flaw exists or the fact that people install cameras in their home to feel more secure. (Would feel the complete opposite personally).